CVE-2023-40123

Summary

CVE-2023-40123 is a vulnerability affecting the updateActionViews function in PipMenuView.java. This issue involves a confused deputy condition, which allows a bypass of the multi-user security boundary. Consequently, local information disclosure can occur without the need for additional execution privileges, making this a potential threat for affected systems. Importantly, user interaction is not necessary for an attacker to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.